Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa
File:                     9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (raw, json)
Hash identifier:          ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=
Subject key identifier:   F5:30:9B:0B:96:4C:59:39:62:40:E2:8F:99:9F:15:39:27:88:64:4B
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       019426D8FFC3BED23A6B5CC15B8D8C6D607F
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa
Signing time:             Thu 02 Jan 2025 11:49:02 +0000
ROA not before:           Thu 02 Jan 2025 11:49:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202539
IP address blocks:        45.12.200.0/24 maxlen: 24
                          2001:67c:1160::/48 maxlen: 48
                          2a0e:bf00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:ff:c3:be:d2:3a:6b:5c:c1:5b:8d:8c:6d:60:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Jan  2 11:49:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f5309b0b964c59396240e28f999f15392788644b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:d6:0f:52:33:29:09:52:41:68:12:be:ae:
                    49:0d:89:c2:c3:6b:74:ca:89:ec:58:a4:a4:4b:56:
                    2e:88:71:4e:9d:91:d5:d1:3f:11:19:6c:9d:ea:55:
                    f5:1b:48:7a:30:2d:77:84:5a:00:d8:6d:1f:e8:0a:
                    17:37:7e:ed:e3:14:15:ed:5e:35:c4:fd:f8:bb:77:
                    7a:e9:92:dd:77:97:74:51:66:f6:ca:d9:96:a1:83:
                    04:5d:4b:ff:a1:16:ce:f1:94:c3:66:b2:fc:b9:18:
                    e9:a4:7c:5f:3f:4c:84:49:e7:0c:98:30:ac:4a:57:
                    ba:0f:ae:0f:65:98:63:f7:f4:f7:81:dd:85:b7:04:
                    16:89:93:6b:bb:9c:36:fd:30:87:88:d9:63:14:2f:
                    f0:9c:1d:54:06:c5:e7:ec:e7:1b:bd:69:a5:e1:c6:
                    f0:e6:59:6f:53:8a:66:4c:8f:f5:6b:f1:4b:23:f1:
                    ab:3a:0d:d8:71:bd:6f:69:9c:81:6f:d2:00:a8:87:
                    6c:d9:7f:3e:01:d9:98:ee:d2:2e:7e:94:20:b3:7e:
                    05:66:b9:60:7f:99:34:86:5e:47:ab:2a:bc:1a:e1:
                    5f:9e:f9:12:75:fa:9e:2e:8a:10:1a:40:ef:4d:51:
                    f7:2d:1b:7c:ac:53:d3:7b:a1:c3:56:67:48:d4:d8:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:30:9B:0B:96:4C:59:39:62:40:E2:8F:99:9F:15:39:27:88:64:4B
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.200.0/24
                IPv6:
                  2001:67c:1160::/48
                  2a0e:bf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:6c:9a:53:e6:f8:8c:40:bb:2e:87:51:df:af:f4:51:00:8e:
         5c:50:ba:a0:b2:fd:87:21:38:e3:1b:b8:cb:b2:ba:d0:2a:a5:
         b7:a4:10:79:a4:47:49:37:d4:cb:a4:6a:ee:bc:e1:2b:b8:fd:
         57:6b:94:a8:e5:66:b9:7e:02:23:f5:e6:18:73:53:f7:69:91:
         b3:3b:37:9a:38:ef:84:cf:eb:8b:03:5e:f3:15:e2:77:e4:fb:
         ed:26:81:4e:bb:c8:cd:d0:b0:82:40:ae:77:e4:1f:37:00:f6:
         3a:31:d1:4c:4e:a5:36:1b:c4:62:65:ee:c0:8a:29:f2:ca:e8:
         91:3c:5e:9d:13:d5:70:ef:11:24:d5:73:2f:05:b7:b8:c1:8c:
         82:3a:30:35:20:4d:ef:fd:ab:f4:5d:26:59:6e:2f:ff:1d:7e:
         45:35:99:c4:0a:f8:12:87:44:87:f8:22:b3:d8:0e:af:8f:8d:
         62:96:9c:42:a5:5f:c5:13:3b:53:a6:01:a1:02:93:68:dc:25:
         71:82:18:00:d5:39:23:c0:ff:1e:81:b4:da:ee:53:8b:a2:d1:
         9e:77:7a:bf:a6:10:be:11:fb:8a:74:fd:d6:4f:60:25:ec:1f:
         b6:b4:db:d6:50:9d:35:6f:66:01:06:0b:48:fe:9e:b1:7b:f7:
         e7:4a:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----